Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: RkZ2nOQJeo4R66aciJaqv8yuU5WrpS4jsVjOyHTn33E=
Subject key identifier: CF:C7:AA:6F:CD:59:5A:79:6E:8E:01:28:18:A9:16:CA:4B:60:A8:36
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 019681D9AD9FD4CE7684090EC68F6CDFC43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 14:00:48 +0000
Manifest this update: Tue 29 Apr 2025 14:00:48 +0000
Manifest next update: Wed 30 Apr 2025 14:00:48 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: ZNbWDqrUu+Pnt9mvKcHCkLCrKzBpRJWWx4K4duLheq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:ad:9f:d4:ce:76:84:09:0e:c6:8f:6c:df:c4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Apr 29 14:00:48 2025 GMT
Not After : Apr 30 14:00:48 2025 GMT
Subject: CN=cfc7aa6fcd595a796e8e012818a916ca4b60a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a4:26:bc:49:83:92:aa:e9:e4:e0:7e:48:a0:
35:f4:e8:7c:a4:d3:40:df:fa:bf:53:a9:35:03:35:
7e:f7:b8:51:7d:f7:b7:a3:50:e4:2f:f4:5c:e8:71:
38:b1:2f:a7:97:3b:51:d3:ed:c6:af:95:f1:48:f3:
eb:a4:c3:40:40:f3:1f:4c:23:6b:8d:c8:35:0b:79:
87:5f:3e:08:78:a4:12:e2:cc:5b:39:6d:ba:84:bc:
0c:67:62:3e:6e:48:5c:5e:c1:44:34:8c:cf:c6:77:
7e:b5:4e:58:a3:7f:1e:8c:d4:91:e2:b8:ff:2c:e5:
ce:44:a3:0b:18:f4:d8:25:16:41:4f:5d:30:2a:a3:
c5:e0:86:a6:b5:f5:fe:13:c1:db:36:16:08:62:79:
98:8e:8e:86:bf:b9:38:cf:9d:18:64:ae:b7:f1:4f:
20:11:f3:ca:0c:ee:cf:94:3d:7e:4b:fd:14:e9:fe:
30:09:44:6e:2e:1d:e9:12:c6:29:7d:cb:63:fb:4c:
b0:d0:be:4b:5a:8c:76:a8:00:d2:6e:4f:36:ce:6b:
16:98:2d:77:30:fa:c0:51:a2:27:88:30:bf:64:9b:
af:fd:79:4a:0c:fe:b0:6b:a2:25:5a:f2:19:03:35:
a8:87:24:83:a7:3f:59:fd:70:8d:8b:de:b5:14:56:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:AA:6F:CD:59:5A:79:6E:8E:01:28:18:A9:16:CA:4B:60:A8:36
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:2a:81:20:de:7b:cf:a8:86:2a:d3:fd:26:eb:66:d3:53:
ac:f4:10:65:d2:af:89:04:c3:2d:9a:3e:5a:04:11:c1:9e:06:
32:e7:1c:87:34:9b:ff:bf:5c:1e:ce:a1:56:83:3b:0b:53:46:
5a:06:e1:67:3e:58:00:d9:ad:82:4d:fa:5e:4a:b3:e0:13:e5:
f3:6b:b9:8e:00:38:cc:ad:7a:2c:c6:6a:97:5b:45:25:00:a8:
3a:a6:55:1c:68:c4:c2:46:0f:b6:cf:41:0a:d4:30:99:13:6b:
32:a3:31:b1:8e:5b:84:11:6d:33:13:07:54:bc:39:45:2c:25:
8e:61:fd:87:48:8c:09:4c:bb:97:18:e5:b4:93:4c:84:0f:21:
f6:68:4d:a5:09:3a:8b:76:5f:5d:54:d7:5a:49:dd:b4:0d:4f:
b8:f7:62:94:77:55:24:94:69:65:38:08:e7:21:d9:15:63:45:
a5:d8:21:b9:94:25:2a:18:b4:16:b9:0e:3d:c2:04:29:e8:6a:
53:08:e8:68:dc:fc:1c:a4:a3:c6:3a:92:00:40:b7:7c:d2:5e:
a8:f5:b6:ba:aa:aa:e1:d2:e6:85:32:e5:e4:35:34:be:a6:37:
b5:63:83:26:7d:eb:3e:06:fb:7b:2f:17:8a:6f:03:84:64:d8:
e4:71:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:38:54 2025 by rpki-client